The short version
Run uses essential cookies only. Five of them, listed in full below. They keep you signed in, let this website know whether you already have a workspace session, remember how you left the workspace sidebar and your answer to the cookie notice, and, once you send Run Copilot a message without an account, count your messages so its limits hold.
We set no analytics cookies and no advertising cookies, we do not track you across other websites, and we do not sell or share anything about your browsing. If that ever changes, the non-essential cookies will only be set after you accept them, and this page will list them before they run.
What cookies are
A cookie is a small file a website stores in your browser and reads back on your next request. Similar technologies (local storage, session storage) do the same job, and this policy covers them too.
Cookies are essential when the service you asked for cannot work without them: signing in is the classic example, since without a cookie the site cannot tell one request from another and forgets you between pages. Essential cookies do not require your consent under EU rules. Everything else does, and we ask before setting it.
The cookies we set
All five are first-party cookies, set by Run on our own domains. None of them contains your name, your email address or anything about what you listen to.
- sb-<project>-auth-token
- Keeps you signed in to the workspace. Holds the session itself, so it is read by the server on every request and is not available to page scriptsSet by app.run.audio (our authentication provider) ▪ Until you sign out, refreshed while you use the workspace
- run_session
- A yes/no hint that a workspace session exists, so this website can show "Open your workspace" instead of "Log in". Carries no account data and no auth materialSet by app.run.audio, readable across run.audio ▪ 7 days, refreshed on each visit to the workspace
- run-rail
- Remembers whether you pinned the workspace sidebar open, so the next page draws it the way you left it. Holds that one choice and nothing elseSet by app.run.audio ▪ 1 year, rewritten each time you pin or unpin the sidebar
- run_consent
- Remembers the choice you made in the cookie notice, so it stops askingSet by run.audio ▪ 182 days
- __Host-run_copilot
- Counts the messages you send Run Copilot without an account, so its daily and monthly limits hold. Holds a random identifier, signed so it cannot be forged, and nothing else, and page scripts cannot read it. Set only when you send your first messageSet by api.run.audio, when you use Run Copilot on run.audio or help.run.audio ▪ 90 days, renewed each time you use Run Copilot
The workspace also uses your browser’s local storage for interface state, for example which panels you left open. That stays in your browser and is never sent to us. Run Copilot keeps its conversation, and anything you have typed but not sent, in the page’s memory rather than in storage: it is gone when you reload the page and, on this website and in the Help Center, when you move to another page.
Third parties
We embed no third-party analytics, no advertising pixels, no social widgets and no third-party chat service, so no third party sets a cookie through this website. The assistant at the bottom right of our pages, Run Copilot, is our own: its panel is served from our domains, it talks only to our own servers, and the one cookie it uses is ours and listed above. Our fonts, images and scripts are served from our own domains rather than a public CDN, which is a privacy decision as much as a performance one.
The one exception is the bot-protection check, provided by Cloudflare, which runs in two places: on the sign-in and sign-up forms in the workspace, and when you send Run Copilot a message on this website or in the Help Center without being signed in. It loads a script from Cloudflare only then (when those forms are shown, or when you send that message, never when a page loads or when you just open the assistant), and it may store a short-lived token in your browser to confirm you passed the check. It exists to stop automated abuse of accounts and of the assistant, and is used for nothing else.
Following a link from Run to a store, or to one of our social profiles, hands you over to that company’s own site and its own cookies. Their policies apply there, not this one.
Your choices
The notice on your first visit records your choice in the run_consent cookie for 182 days. Because we currently set nothing non-essential, choosing “Essential only” and “Accept all” produce the same behaviour today: the difference matters the moment we add anything optional, and “Essential only” will keep it off.
The essential cookies cannot be turned off from the notice, because turning them off would mean the workspace could not sign you in. Clearing them in your browser has the same effect as signing out. Clearing the Run Copilot cookie ends the link between you and the messages it counted, and your next message starts afresh.
Managing cookies in your browser
Every browser lets you see, delete and block cookies, usually under Settings, then Privacy. You can clear ours specifically for run.audio, app.run.audio and api.run.audio, or block all cookies for those domains, in which case this website and the Help Center keep working normally, Run Copilot cannot answer you there without an account (it says so, and sends nothing), and the workspace will not be able to keep you signed in.
Browser “do not track” and global privacy signals are respected by default here for the simple reason that we run no tracking to switch off.
Changes to this policy
When the cookies we set change, this page changes with them, and the version and date at the top tell you which edition you are reading. Anything non-essential will be announced and asked for before it runs.
Contact
Questions about this policy, or about anything we store in your browser: privacy@run.audio. How we handle personal data more broadly is in our Privacy Policy.